← Voltar para CVEs
CVE-2026-3911
LOW2.7
Descricao
A flaw was found in Keycloak. An authenticated user with the view-users role could exploit a vulnerability in the UserResource component. By accessing a specific administrative endpoint, this user could improperly retrieve user attributes that were configured to be hidden. This unauthorized information disclosure could expose sensitive user data.
Detalhes CVE
Pontuacao CVSS v3.12.7
SeveridadeLOW
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosHIGH
Interacao do usuarioNONE
Publicado3/11/2026
Ultima modificacao4/2/2026
Fontenvd
Avistamentos honeypot0
Fraquezas (CWE)
CWE-359
Referencias
https://access.redhat.com/errata/RHSA-2026:6477(secalert@redhat.com)
https://access.redhat.com/errata/RHSA-2026:6478(secalert@redhat.com)
https://access.redhat.com/security/cve/CVE-2026-3911(secalert@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=2446392(secalert@redhat.com)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.